To: Central Fax Nunber USPTO b 703-87 Fron: Michael Dryja 



Pg 5/18 04-11-05 02:50 PM CST 



Joseph Page 3 

Serial no. 09/876,351 
Filed 6/6/2001 

Attorney docket no, BEA92001 QOQ8US1 



In the specification : 

Please replace paragraph 37, on pages 8-9 of the specification as originally filed, with the 
following paragraph. 

FTG. 2 shows an example two-node system 200 in conjunction with which embodiments of 
the invention may be implemented. The first node 202 and the second node 204 correspond to 
different servers in the system 200, but they may also correspond to different partitions of the 
same server. Tn such instanc e , th e partitions 20 8 a, 208b, 20 8 c, and 20 8 d of th e first nod e 202 ar e 
not distinctive and represent the game partition, and the partition s 21 8 a and 21 8 b of the second 
node 20 4 or e also not di s tinctiv e and r e present th e same partition. Similarly, in such instance, the 
conn e ction manag e ment m e chani s m 226 of th e first nod e 202 and th e conn e ction manag e ment 
m e chani s m 22 8 of th e se cond nod e 20 4 r e pr ese nt th e s am e conn e ction manag e ment m e chani s m. 
While the system 200 includes a first node 202 and a second node 204, the invention itself may be 
implemented in conjunction with systems having fewer or greater numbers of nodes. For 
example, secure virtual communication channels may be established between user or kernel 
processes of different partitions of the same node, or between user or kernel processes of different 
partitions of three or more nodes. 



Please replace paragraph 50, on pages 13-14 of the specification as originally filed, with 
the following paragraph. 

Next, the kernel agent, for the user process 216, creates a channel key (504), which the 
connection management mechanism 226 stores in its channel key table (506). The mechanism 
226 stores the channel key in an entry of the channel key table that corresponds to the channel 
state table entry created by the kernel agent on behalf of the user process 216. The mechanism 



PAGE 5/1 8 x RCVD AT 4f1 1/2005 3:49:03 PM [Eastern Daylight Time] * SVR:USPT0-EFXRF-1/7 9 DNlS:8729306 " CSID:(425)563-2098 * DURATION (mm-ss):04-26 



To: Central Fax Number USPTO @ 703-87 Fron: Michael Dryja 



Pg 6/18 04-11-05 02:50 Ph CST 



Joseph Page 4 

Serial no. 09/876,351 

Filed 6/6/2001 

Attorney docket no, BEA9200 1 Q008US1 



226 sends the channel key, along with the identifications of the partition 208d of FIG. 2 and the 
kernel agent (user processes) 216 and 220b, to the connection management mechanism 228 (5 1 0) 
(508). The transmission of this information is part of a connection request by the user process 
216 to establish a virtual secure communication channel to receive messages from the user 
process 220b. The mechanism 228 then receives the key and the identifications firom the 
connection management mechanism 226 (510). 
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